Make the pass extensions configurable

hosts/t480/configuration.nix

@@ -13,7 +13,15 @@
   ];
 
   nixosModules = {
-    cli.password-store.enable = true;
+    cli.password-store = {
+      enable = true;
+
+      extensions = with pkgs.passExtensions; [
+        pass-audit
+        pass-otp
+        pass-update
+      ];
+    };
 
     core = {
       bluetooth.enable = true;

modules/nixos/cli/password-store.nix

@@ -11,20 +11,21 @@ let
   cfg = config.nixosModules.cli.password-store;
 in
 {
-  options.nixosModules.cli.password-store.enable = mkEnableOption "Enable pass";
+  options.nixosModules.cli.password-store = {
+    enable = mkEnableOption "Enable pass";
+
+    extensions = mkOption {
+      default = [ ];
+      type = types.listOf types.package;
+      description = "pass extensions to install.";
+    };
+  };
 
   config = mkIf cfg.enable {
     environment.systemPackages = with pkgs; [
       passmenu-otp
 
-      (pass.withExtensions (
+      (pass.withExtensions (e: with e; cfg.extensions))
-        e: with e; [
-          passExtensions.pass-audit
-          passExtensions.pass-import
-          passExtensions.pass-otp
-          passExtensions.pass-update
-        ]
-      ))
     ];
   };
 }